> TODAY'S SUMMARY (145 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Attackers are actively exploiting a newly discovered vulnerability in Oracle E-Business Suite, prompting urgent patching efforts. The U.S. Treasury has sanctioned Russian and North Korean nationals for their involvement in fraudulent IT worker schemes, underscoring ongoing geopolitical cyber threats. In a concerning development, the Chinese state-sponsored group Volt Typhoon is leveraging a covert network to conduct zero-day attacks, while AI-driven hacks are increasingly targeting South Korea's financial sector. Additionally, significant vulnerabilities have been identified in software like PHP, with researchers warning of a potential "Vulnpocalypse" due to aging codebases. Companies are urged to update their systems promptly, as many recent breaches continue to expose vast amounts of sensitive data.
|
// AI-powered summary generated at 20:00
The FBI issued warnings about separate Russian and Iranian cyber campaigns involving social media messaging platforms like Signal and Telegram.
It was discovered that systemd incorrectly handled certain cgroup paths.
A local attacker could possibly use this issue to cause systemd to crash,
resulting in a denial of service. (CVE-2026-29111)
It was discovered that the systemd udev component incorrectly handled
certain fields received from th...
June 3, 2022: Original publication date of this post. This post has been updated to add the additional IAM policy types: Resource control policies. You manage access in AWS by creating policies and attaching them to AWS Identity and Access Management (IAM) principals (roles, users, or groups of user...
The TeamPCP hacking group is targeting Kubernetes clusters with a malicious script that wipes all machines when it detects systems configured for Iran. [...]
Absolute Security released its 2026 Resilience Risk Index at RSA Conference 2026, and the headline finding is stark: endpoint security software fails to protect devices nearly 21 percent of the time, leaving enterprise PCs exposed to attacks for up to 76 days per year. The report is based on anonymi...
IRONSCALES is bringing a new threat intelligence series to the security community, launching “Email Attack of the Day” at RSA Conference 2026 this week. The series publishes daily breakdowns of real phishing attacks detected by IRONSCALES’ Adaptive AI and its community of more than 30,000 security p...
Microsoft semble enfin avoir entendu la grogne des utilisateurs ! Un plan d'action a été dévoilé pour améliorer les performances et la stabilité de Windows 11.
Le post Microsoft avoue ses erreurs avec Windows 11 : voici ce qui va changer a été publié sur IT-Connect.
The attorney general has suggested the basis of the investigation and warrant stem from a rambling citizen presentation at a county meeting last month.
The post State officials, election experts question California sheriff’s seizure of ballots appeared first on CyberScoop.
strongSwan could be made to consume resources or crash if it received specially crafted network traffic.
Popular anime streaming platform Crunchyroll is investigating a breach after hackers claimed to have stolen personal information for approximately 6.8 million people. [...]
Several security issues were fixed in the Linux kernel.
A notice on the popular paywall-bypass website Archive.today said that access is blocked "by decision of [Russian] public authorities."
Several security issues were fixed in sized-chunks.
Author, Creator & Presenter: Lisa Li , Security Engineer at Scale AI
Our thanks to BSidesSLC for publishing their Creators, Authors and Presenter’s outstanding BSidesSLC 2025 content on the Organizations' YouTube Channel.
The post BSidesSLC 2025 – So You Think You Can Detect? Lisa Li On Detect...
First heard as US and Israeli strikes on Iran began, the shortwave broadcast has since been traced to a US military base in Germany—but its purpose and its operator remain unclear.
Faux site TOP 14 : ZATAZ découvre une fausse boutique qui annonce l'achat et la revente de billets pour des matchs de rugby.
The campaign goes back to 2023 but is the subject of an alert amid conflict in the Middle East.
The post FBI: Iranian hackers targeting opponents with Telegram malware appeared first on CyberScoop.
The educational services company Kaplan told state regulators that at least 230,000 people had Social Security and driver’s license numbers leaked following a cybersecurity incident in the fall of 2025.
ZeroTier used RSAC 2026 to introduce ZeroTier Quantum, a new software-defined networking platform positioned for organizations planning for post-quantum cryptography requirements. In a Business Wire release, the company said its quantum cryptographic design targets CNSA 2.0 requirements and is meant...
Protos Labs used RSA Conference 2026 to launch a freemium edition of Protos AI, opening up the Singapore-based company’s agentic cyber threat intelligence platform to security teams that want to test the technology before committing to an enterprise contract. The free tier is available immediately a...